CVE-2022-0083 Generation of Error Message Containing Sensitive Information in livehelperchat/livehelperchat
Attackers can obtain sensitive information via error messages in Live Helper Chat, potentially aiding further attacks.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-0083?
CVE-2022-0083 is a high-severity vulnerability in livehelperchat/livehelperchat, published on 4 Jan 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information
Weakness: CWE-209
Which versions are affected by CVE-2022-0083?
3 open source packages ship an affected version, including remdex/livehelperchat and livehelperchat. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
remdex/livehelperchat Packagist | All versions | 3.91 |
remdex/livehelperchat Packagist | All versions | 3.91 |
livehelperchat Bitnami | All versions | 3.91.0 |
Products include Livehelperchat Live Helper Chat.
How do I fix CVE-2022-0083?
Upgrade remdex/livehelperchat to 3.91 or later.
Is CVE-2022-0083 being exploited?
There is no known exploitation of CVE-2022-0083 in the wild and no public exploit code.
Other vulnerabilities in livehelperchat/livehelperchat
- CVE-2024-27516 livehelperchat Server-Side Template Injection
- CVE-2022-0935 Host Header injection in password Reset in livehelperchat/livehelperchat
- CVE-2022-1234 XSS in livehelperchat in livehelperchat/livehelperchat
- CVE-2022-1191 SSRF on index.php/cobrowse/proxycss/ in livehelperchat/livehelperchat
- CVE-2022-1213 SSRF filter bypass port 80, 433 in livehelperchat/livehelperchat
Sources
Also known as BIT-livehelperchat-2022-0083, GHSA-4xww-6h7v-29jg.